{"id":28410003,"url":"https://github.com/crowdstrike/gcp-vm-manager-os-policy","last_synced_at":"2026-02-13T03:53:42.361Z","repository":{"id":235595025,"uuid":"764314164","full_name":"CrowdStrike/gcp-vm-manager-os-policy","owner":"CrowdStrike","description":null,"archived":false,"fork":false,"pushed_at":"2025-12-12T18:09:18.000Z","size":1547,"stargazers_count":2,"open_issues_count":5,"forks_count":1,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-12-13T09:53:41.413Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CrowdStrike.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-02-27T21:20:07.000Z","updated_at":"2025-12-12T18:08:41.000Z","dependencies_parsed_at":null,"dependency_job_id":"123cfc10-3f42-4348-b887-5c5004878a99","html_url":"https://github.com/CrowdStrike/gcp-vm-manager-os-policy","commit_stats":null,"previous_names":["crowdstrike/gcp-os-policy","crowdstrike/gcp-vm-manager-os-policy"],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/CrowdStrike/gcp-vm-manager-os-policy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Fgcp-vm-manager-os-policy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Fgcp-vm-manager-os-policy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Fgcp-vm-manager-os-policy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Fgcp-vm-manager-os-policy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CrowdStrike","download_url":"https://codeload.github.com/CrowdStrike/gcp-vm-manager-os-policy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CrowdStrike%2Fgcp-vm-manager-os-policy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29395434,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-13T00:53:09.511Z","status":"online","status_checked_at":"2026-02-13T02:00:10.076Z","response_time":78,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-02T11:09:39.074Z","updated_at":"2026-02-13T03:53:42.356Z","avatar_url":"https://github.com/CrowdStrike.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# cs-policy\n\nA helper tool for deploying CrowdStrike OS Policies to GCP Zones. This tool automates many of the manual steps required to create \u0026 deploy OS Policies to GCP VMs.\n\nThe tool does the following:\n\n- Downloads the N-1 version of the CrowdStrike Falcon Sensor\n- Uploads the CrowdStrike Falcon Sensors to the GCP Storage Bucket of your choice\n- Generates a OS Policy template for your environment\n- Creates a OS Policy Assignment in the GCP Zones of your choice\n\n![terminal](./docs/gcptui.gif)\n\n## Supported Operating Systems\n\nThe CrowdStrike OS Policy currently supports the following operating systems:\n\n| Operating System                                         | Architecture |\n| -------------------------------------------------------- | ------------ |\n| Red Hat Enterprise Linux 7                               | x86_64       |\n| Red Hat Enterprise Linux 8                               | x86_64       |\n| Red Hat Enterprise Linux 9                               | x86_64       |\n| Red Hat Enterprise Linux 10                              | x86_64       |\n| Oracle Linux 7                                           | x86_64       |\n| Oracle Linux 8                                           | x86_64       |\n| Oracle Linux 9                                           | x86_64       |\n| Oracle Linux 10                                          | x86_64       |\n| CentOS 8                                                 | x86_64       |\n| CentOS 9                                                 | x86_64       |\n| CentOS 10                                                | x86_64       |\n| SUSE Linux Enterprise Server 12                          | x86_64       |\n| SUSE Linux Enterprise Server 15                          | x86_64       |\n| Ubuntu 16.04, 18.04, 20.04, 22.04, 24.04                 | x86_64       |\n| Debian 9, 10, 11, 12, 13                                 | x86_64       |\n| All Windows Versions supported by the CrowdStrike Sensor | x86_64       |\n\n\u003e Note: For supported Windows versions, check the CrowdStrike documentation.\n\n## Requirements\n\n- CrowdStrike API Keys with the `Sensor Download` scope\n- [gcloud cli](https://cloud.google.com/sdk/gcloud) installed\n- Project with VM Manager setup\n- GCP permissions to create OS Policy Assignments and upload files to the target GCP Storage Bucket\n\n### GCP VM Manager\n\nOS Policy is a feature of GCP VM Manager. In order to use OS Policies to deploy the CrowdStrike Falcon Sensor, you must setup VM Manager. See the [GCP VM Manager documentation](https://cloud.google.com/compute/docs/vm-manager) for more information about VM Manager and how to set it up.\n\n### Generate API Keys\n\n1. In the CrowdStrike console, navigate to **Support and resources** \u003e **API Clients \u0026 Keys**. Click **Add new API Client**.\n2. Add the following api scopes:\n\n    | Scope           | Permission | Description                                                                        |\n    | --------------- | ---------- | ---------------------------------------------------------------------------------- |\n    | Sensor Download | *READ*     | Allows the tool to download the sensor and grab your CID from the CrowdStrike API. |\n\n3. Click **Add** to create the API client. The next screen will display the API **CLIENT ID**, **SECRET**, and **BASE URL**. You will need all three for the next step.\n\n    \u003cdetails\u003e\u003csummary\u003epicture\u003c/summary\u003e\n    \u003cp\u003e\n\n    ![api-client-keys](https://raw.githubusercontent.com/CrowdStrike/aws-ssm-distributor/main/official-package/assets/api-client-keys.png)\n\n    \u003c/p\u003e\n    \u003c/details\u003e\n\n\u003e [!IMPORTANT]\n\u003e This page is only shown once. Make sure you copy **CLIENT ID**, **SECRET**, and **BASE URL** to a secure location.\n\n4. Use `BASE_URL` to infer the `FALCON_CLOUD` value. \n    | BASE URL                                 | FALCON_CLOUD |\n    | ---------------------------------------- | ------------ |\n    | `https://api.crowdstrike.com`            | `us-1`       |\n    | `https://api.us-2.crowdstrike.com`       | `us-2`       |\n    | `https://api.eu-1.crowdstrike.com`       | `eu-1`       |\n    | `https://api.laggar.gcw.crowdstrike.com` | `us-gov-1`   |\n\n## Installation\n\n[Download release binaries](https://github.com/CrowdStrike/gcp-os-policy/releases/latest) that match your platform\n\n## Usage\n\n1. Authenticate with the gcloud CLI.\n\n    ```bash\n    gcloud auth application-default login\n    ```\n\u003e Note: There are other ways to authenticate with GCP like using a service account. Use whichever method is best for your environment. The `cs-policy` tool will find the credentials and use them.\n2. Set the project to the project you want to deploy the OS Policies to.\n\n    ```bash\n    gcloud config set project cs-policy\n    ``` \n3. OPTIONAL: Export the CrowdStrike API keys as environment variables. Alternatively you can provide the keys as command line arguments. See `cs-policy create --help` for more information.\n\n    ```bash\n    export FALCON_CLIENT_ID=********\n    export FALCON_CLIENT_SECRET=********\n    export FALCON_CLOUD=********\n    ```\n    \n\u003e [!IMPORTANT]\n\u003e `FALCON_CLOUD` supports the following values `autodiscover`, `us-1`, `us-2`, `eu-1`, `us-gov-1`. If not provided, the tool will default to `autodiscover`.\n\n4. Run the tool.\n\n    ```bash\n    cs-policy create --bucket=example-bucket --zones=us-central1-a,us-central1-b --linux-install-params='--tags=\"Washington/DC_USA,Production\" --aph=proxy.example.com --app=8080' --windows-install-params='GROUPING_TAGS=\"Washington/DC_USA,Production\" APP_PROXYNAME=proxy.example.com APP_PROXYPORT=8080'\n    ```\n\n    Use the `--help` flag to see all available options and more examples.\n\n    ```bash\n    cs-policy --help\n    ```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdstrike%2Fgcp-vm-manager-os-policy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcrowdstrike%2Fgcp-vm-manager-os-policy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdstrike%2Fgcp-vm-manager-os-policy/lists"}